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Begin 



shipped device ID, SS, op. 
ID, psswd installed on 
system; 
shipped device ID and SS 
installed on console device 



access paswd 
entered to access 
device ID and SS 



4of 




session secret key 
generated w/ 1st 
EKE seq. 



connect 1st EKE 
seq. -use SS to 

encrypt 
subsequent data 
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session secret key 

as SS for 
asociated device 
ID on svs. 



end 
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store session key 
as device SS 
associated with 
device ID on 
console device 



operator ID and 
psswd entered 



;</5 



store additonal 
devices in device 

table and 
operators in user 
table 
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2nd EKE seq. 
initiated 



set up additonal 
operators and 
console devices on 
system 



open console 
session and 
provide access to 
operator 



store operator ID 
and psswd on 
system 
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If SI 



operator initiates 
connection of device to 
system by entering 
access psswd 



dt53 



stores device ID 
and SS used w/ 
1st EKE seq. 



as4 



initiate 1st EKE seq. 



4fc 



terminate 
authentication 
process 
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use SS to encrypt 
subsequent data 



operator enters 
user ID and 
psswd; initiate 2nd 
EKE seq. 




open console 
session; provide 
acces to operator 



data flow protected 
and encrypted by 
2nd EKE session 
secret key 
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